$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: nFb8yUm20x108xPfopeOqyuPpww4R92HNu05FMfsgwo= Subject key identifier: 7D:D3:01:6E:BC:E9:56:FD:73:7C:45:0A:6B:A0:5F:A9:0B:A0:92:B8 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0A47 Signing time: Mon 12 May 2025 19:34:08 +0000 Manifest this update: Mon 12 May 2025 19:34:07 +0000 Manifest next update: Mon 19 May 2025 19:34:07 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: 6RLjbhcJ8ruAiCtk5j72i04veKdACN748FgqcbskUJw=) 2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: 8qV4xNEzC9YwAyrCmGEDqkkT1vswlJKt6VLA8n7jDac=) 3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: nsJgzUwSSMXcZYSBnW8T1s1Gr6R7nDs7M70WL4KuFGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: May 12 19:34:07 2025 GMT Not After : May 19 19:34:07 2025 GMT Subject: CN=68224d2f-d99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:db:b3:96:38:7f:cf:db:cc:46:6c:67:0a: 11:96:c9:48:0e:b6:50:08:82:90:1e:5c:24:3d:21: 4b:63:36:28:af:51:34:3a:31:1c:0e:f0:2a:8d:4e: 81:50:e4:f7:c2:eb:d0:fe:a0:1e:c9:78:52:dc:f8: cf:d0:11:6f:d5:d5:23:f8:eb:57:30:e0:1d:f6:fb: 1c:e3:88:34:21:92:50:e1:3f:3d:d8:c5:44:b9:3e: 06:9b:62:62:2f:af:0c:dc:fe:b6:f2:d7:f3:1e:e3: db:c1:5f:3e:bf:16:73:7f:5c:bf:e2:db:2c:85:ab: fb:5e:e7:a1:88:11:aa:18:27:69:17:7a:fd:80:f4: 0e:c6:62:a5:b0:e0:ce:ac:d6:d1:5b:e5:45:34:cb: b1:36:46:e1:38:06:ba:b6:1c:42:0a:41:eb:be:85: de:b5:92:a2:9e:33:62:b3:ca:b6:d8:86:f5:ac:ae: 1d:89:86:c6:28:41:29:45:f2:60:16:52:16:76:0e: b5:5e:c3:d9:7d:34:a1:79:26:4d:75:7c:4b:db:79: e8:26:de:06:a6:b1:36:65:92:4f:4a:3c:29:2e:4d: 48:e4:ff:cf:13:6c:01:1d:4e:cd:df:39:a8:84:2e: 8c:c9:77:b0:99:4b:e4:b1:fd:1e:fd:f8:4b:64:3e: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D3:01:6E:BC:E9:56:FD:73:7C:45:0A:6B:A0:5F:A9:0B:A0:92:B8 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1c:67:78:a9:60:89:31:9f:c6:39:6d:41:c1:44:f8:57:13: ca:05:66:bd:c5:1b:f5:58:06:9f:35:bf:f4:e1:89:5b:86:1f: 7e:3e:b0:6a:ec:7a:8e:6e:e1:22:09:23:b6:0a:cb:81:d3:98: a4:7d:60:8d:9d:a7:37:cd:e3:ee:67:e4:69:a9:08:0e:bc:30: 07:b3:dc:95:bc:e2:38:94:39:55:4f:8c:7b:b6:bf:ad:39:5b: 01:94:70:d4:fb:93:89:cc:9a:34:b2:37:f7:a1:2b:0f:3c:8d: 58:22:f2:ba:cf:7d:aa:5f:2f:6e:55:cf:28:f2:a9:7d:88:da: 59:3a:3c:c2:63:76:4b:21:1a:a5:8e:d7:ae:ae:16:ac:3e:74: da:a1:78:09:18:b5:a4:b0:61:e9:24:86:f1:f0:2d:e5:01:59: 09:68:b8:cd:8e:99:ba:6b:2d:77:ef:8d:45:9b:9e:65:87:41: 6d:42:14:74:25:23:75:ca:70:16:71:d7:81:ac:f4:7b:b2:4f: 4c:a2:db:5d:9e:6f:a1:34:93:8f:3b:b9:96:96:e9:89:39:cb: 6c:8b:0a:ac:d6:e8:6e:3c:5c:29:7a:31:96:89:88:8d:cd:82: 62:02:7a:03:83:63:80:99:f3:7f:3f:dd:4d:1c:45:68:bd:ef: 26:ba:03:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjUwNTEyMTkzNDA3WhcNMjUwNTE5MTkzNDA3WjAYMRYwFAYD VQQDEw02ODIyNGQyZi1kOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPrbs5Y4f8/bzEZsZwoRlslIDrZQCIKQHlwkPSFLYzYor1E0OjEcDvAqjU6B UOT3wuvQ/qAeyXhS3PjP0BFv1dUj+OtXMOAd9vsc44g0IZJQ4T892MVEuT4Gm2Ji L68M3P628tfzHuPbwV8+vxZzf1y/4tsshav7XuehiBGqGCdpF3r9gPQOxmKlsODO rNbRW+VFNMuxNkbhOAa6thxCCkHrvoXetZKinjNis8q22Ib1rK4diYbGKEEpRfJg FlIWdg61XsPZfTSheSZNdXxL23noJt4GprE2ZZJPSjwpLk1I5P/PE2wBHU7N3zmo hC6MyXewmUvksf0e/fhLZD5/sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3TAW68 6Vb9c3xFCmugX6kLoJK4MB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOHGd4qWCJMZ/GOW1BwUT4VxPKBWa9xRv1WAafNb/04Ylbhh9+PrBq 7HqObuEiCSO2CsuB05ikfWCNnac3zePuZ+RpqQgOvDAHs9yVvOI4lDlVT4x7tr+t OVsBlHDU+5OJzJo0sjf3oSsPPI1YIvK6z32qXy9uVc8o8ql9iNpZOjzCY3ZLIRql jteurhasPnTaoXgJGLWksGHpJIbx8C3lAVkJaLjNjpm6ay13741Fm55lh0FtQhR0 JSN1ynAWcdeBrPR7sk9Mottdnm+hNJOPO7mWlumJOctsiwqs1uhuPFwpejGWiYiN zYJiAnoDg2OAmfN/P91NHEVove8mugMS -----END CERTIFICATE-----Generated at Wed May 14 18:28:23 2025 by rpki-client